PRIVACY POLICY ARTSTUDIO JO

March 2021

This document describes how I manage your personal data. Of course I handle your personal data with utmost care and confidentiality.

1. Who am I ?

ArtStudio Jo
Joseph Bogaertstraat 8-0002
8000 Brugge

Company Number :                         BE 066 068 0460

Questions or requests ?
artstudiojo@hotmail.com

2. Personal Data

These are the personal data I process (potentially) :

-First and Last name
-Complete address
-email address
-phone number
-skype name (if appliccable)
-social media account names (if appliccable)
-invoice number
-Credit card data (webshop)
-pictures of your pet (for Animal Portraits)
-other pictures (for work on commission)

Where do I get your personal data from ?
I have obtained the data above from you by way of your subscription to my newsletter (“Stories”), via a form on my website, via a register at an expo or via my webshop.

3. Purpose

I process your personal data only when it is line with the General Data Protection Regulation (GDPR) and the Belgian “Wet Bescherming Persoonsgegevens” (Law on Personal Data Protection) and for the purposes here described.

Reactions
In the Animal Portraits gallery I use your first name and the initial of your last name below the text I received from you. This remains on my website indefinitely, unless the portrait is removed from the site or you request to remove it.

Contact
If you have contacted me, by phone, email, contact form, WhatsApp, Skype or Social media, then I have received your data. I process these to be able to react to your message or request. If you contacted me via Social media, then it is most likely through the personal account of Joke. In that case, use of data is private. In all other cases I keep the data for a maximum duration of 5 years, so I can check when we were in contact last, what the subject was and how you reacted at the time. It is in my legitimate interest to know this, so I can assist you better and set better priorities.

Newsletter
I regularly send you a newsletter (“Story”) because you are a customer or because you subscribed to it through my website. I therefore process your first name and email address, so I can send you information and news. Underneath each and every newsletter, you have the opportunity to unsubscribe. I save your data until the moment you unsubscribe.

Offers
In case you request an offer for commission work, I process your personal data to be able to send you an appropriate offer. I save offers for a duration of 8 years, considering it’s my legal duty to be able to demonstrate what preceeded an invoice.

Invoicing
When you make a purchase in my webshop, or during an offline sales opportunity, I’ll process the data necessary to draw up an invoice and (if applicable) to send the work to a delivery address indicated by you. Those will necessarily include your full  name and email address, and other data needed for invoicing. At payment, I’ll also get insight in the account number it originated from, who the account holder is or what the credit card data are. I save invoices, payment data and delivery documents for a duration of 8 years.

Legitimate interest
In some of the cases above, I have a legitimate interest to process data. I have weighed up my interests, for instance my interest to safeguard my evidence position and legal position, against the privacy interest of the person whose data I process. I will limit the processing of personal data to the absolute minimum required to achieve my goal and safeguard my legitimate interests.

4. Transfer of data

Recipients of your personal data
I share your data with third parties :

• Website hosting provider (EasyHost, Combell)
• WordPress
• Accountant (if applicable)
• Mail servers
• Phone services
• Payment services (Molly)
• Delivery services (courrier services and logistical platform)

Transfer to third countries
I attempt to keep personal data within EU borders as much as possible, but it is sometimes unavoidable to use service provides from outside the EU. These companies are established in a country judged adequate by the European Commission.

With all data processing parties, in- and outside the EU, I have a Data Processing Agreement (DPA), either individually or as included in their Terms of Use.

5. Your Rights

I’m happy to inform you of your rights and the impact you can have on the processing of your personal data.

Inspection, rectification and deletion
You have the right to know what personal data I process and you can request to rectify or delete them.

Limitation of the data processing
You have the right to request to limit the processing of your personal data, for instance when the data are no longer valid, the processing unlawful ; when I no longer need your data or awaiting a decision on an objection to the processing you made earlier.

Right to object
You are entitled to object to the processing of your personal data. In case you object to the use of your personal data for promotional purposes, then I will abstain from using them in this way.

Transferability of data
You have the right to receive your personal data from me in a structured, up to date and machine readable format, so you can transfer them to another party, when you had given me permission to process your data and when the processing has been done in an automated way.

Revoke permission
If I have collected your data for a particular purpose, based on your permission, then you have the right to revoke this consent at any time. This revocation does not diminish the legality of the data processing before the consent was revoked.

Complaints
If you have any complaints regarding my management of your personal data, you have the right to file a complaint with the Authority Personal Data Protection  (https://www.gegevensbeschermingsautoriteit.be).

6. Protection of personal data

I have taken appropriate measures (technical and other) to ensure protection of personal data from loss or any other form of unlawful processing. These measures ensure a level of protection that matches the data I process.

7. Amendments

It is possible that I have to make amendments to my Privacy Policy, for instance when adopting another way of working. I will publish the new privacy policy on my website. In case the amendments directly affect you, I will also communicate them to you directly.POLICY